FreeRDP prior to version 2.0.0-rc4 contains an Out-Of-Bounds Write of up to 4 bytes in function nsc_rle_decode() that results in a memory corruption and possibly even a remote code execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade freerdp2Upgrade freerdp | Apr 22, 2019 | Nov 29, 2018 |
| Amazon Linux Ami 2 | — | Upgrade freerdp-pluginsUpgrade freerdp-debuginfoUpgrade freerdp-libsUpgrade freerdpUpgrade freerdp-devel | Apr 27, 2020 | Nov 29, 2018 |
| Centos_linux | — | Upgrade freerdp-pluginsUpgrade freerdp-develUpgrade freerdpUpgrade freerdp-libsUpgrade freerdp-debuginfo | Apr 13, 2019 | Nov 29, 2018 |
| Debian | — | Upgrade freerdp2 | Feb 20, 2019 | Nov 29, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade freerdpUpgrade freerdp-libsUpgrade freerdp-plugins | May 1, 2019 | Nov 29, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade freerdp-pluginsUpgrade freerdp-libsUpgrade freerdp | May 1, 2019 | Nov 29, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade freerdp-libsUpgrade freerdpUpgrade freerdp-plugins | May 1, 2019 | Nov 29, 2018 |
| Oracle_linux | — | Upgrade freerdpUpgrade freerdp-libsUpgrade freerdp-develUpgrade freerdp-plugins | Jul 21, 2020 | Oct 22, 2018 |
| Redhat_linux | — | No solution existsUpgrade freerdp-develUpgrade freerdp-debuginfoUpgrade freerdp-libsUpgrade freerdpUpgrade freerdp-plugins | Apr 3, 2019 | Nov 29, 2018 |
| Suse | — | Upgrade vinagreUpgrade freerdp-waylandUpgrade uwac0-0-develUpgrade freerdp-develUpgrade freerdp-proxyUpgrade freerdpUpgrade libuwac0-0Upgrade libfreerdp2Upgrade libwinpr2Upgrade freerdp-serverUpgrade vinagre-langUpgrade winpr2-devel | Jan 22, 2019 | Nov 29, 2018 |
| Ubuntu | — | Upgrade libfreerdp2-2Upgrade libfreerdp1Upgrade libfreerdp-client1.1Upgrade libfreerdp-client2-2 | Jan 10, 2019 | Nov 29, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub